CPHulk Country Whitelist
Hello, my understanding of whitelisting a country on cPHulk is that it would allow all users from that specific country that you whitelisted to be able to log in to WHM.
How long does the whitelist take to take effect? Our users from the country I whitelisted still can't seem to log in.
And would CSF be better for security than CPHulk?
-
The whitelist should kick in after just a few seconds - however, geolocation of IP addresses isn't 100%: especially when it comes to corporate networks and VPNs.
cPanel uses the MaxMind Lite database for geolookups - so it'll be worth checking via https://www.maxmind.com/en/geoip-demo if the user's IP address does actually connect with the expected country.
There's no harm in using CSF and CPHulk together - they both complement each other well and both do slightly different jobs. CSF is more a "firewall suite with additional LFD - Login Failure Daemon" and blocks by IP address - and can check brute force attempts across multiple ports (not just cPanel ones).. cPHulk will only detect username/password attempts against cPanel ports, exim, dovecot, FTP and SSH - but can do blocking on an account level (not just IP address).
2 -
rbairwell
I was using both CSF and CPHulk but then even after whitelisting a country the user still can't log-in. I stop using the CPHulk for now and trying to find a way.
I can finally press the submit button after a week.0 -
I'm guessing imperfect country matching is the most likely blame here.
0 -
cPRex
Could you please elaborate? Sorry, still new to this side of Cpanel.0 -
I was just re-stating what rbairwell said, that no IP-to-country matching list is perfect, so it's possible your user isn't showing up as coming from that whitelisted country according to Maxmind.
0
Please sign in to leave a comment.
Comments
5 comments